mcp-grafana-bin
The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal and trusted practice; the only concern is the non-critical warning about default telemetry, which is disclosed in the .install file and can be disabled.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from the project's official GitHub releases, which is a normal and trusted practice; the only concern is the non-critical warning about default telemetry, which is disclosed in the .install file and can be disabled.
PKGBUILD
# Maintainer: agony <27015 at riseup dot net>
pkgname=mcp-grafana-bin
pkgver=2.2.0
pkgrel=1
pkgdesc='MCP server for Grafana (prebuilt)'
arch=('x86_64' 'aarch64' 'i686')
url='https://github.com/grafana/mcp-grafana'
license=('Apache-2.0')
provides=("mcp-grafana=${pkgver}")
conflicts=('mcp-grafana')
install=mcp-grafana.install
_release="${url}/releases/download/v${pkgver}"
source_x86_64=("mcp-grafana-${pkgver}-x86_64.tar.gz::${_release}/mcp-grafana_Linux_x86_64.tar.gz")
source_aarch64=("mcp-grafana-${pkgver}-aarch64.tar.gz::${_release}/mcp-grafana_Linux_arm64.tar.gz")
source_i686=("mcp-grafana-${pkgver}-i686.tar.gz::${_release}/mcp-grafana_Linux_i386.tar.gz")
sha256sums_x86_64=('f93bfbd94cde68cc2e43cf5ba55da4f8e28b1a36b14fb14dadd566fc36b1312b')
sha256sums_aarch64=('6478ef322152bf15c0cec565d6bdfa5c3d123e1080aaf03bd370418849267b16')
sha256sums_i686=('9a5de0559c46a4b747ec39808c5239e907f444bb85afb3acb189493657894af7')
package() {
install -Dm755 mcp-grafana -t "${pkgdir}/usr/bin"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-04 10:06:54 | Low | 2 |